Expert Windows Driver Engineer

Technologies we use

About the project

This is how we organize our work

This is how we work

Team members

Your responsibilities

• Build Windows kernel-mode drivers and user-mode services that collect, filter, and analyze endpoint telemetry.
• Design and develop low-level components for the Windows endpoint sensor, focusing on stability, performance, and stealth.
• Implement robust techniques for process/thread monitoring, registry tracking, file system interception, and network event visibility.
• Debug complex kernel-mode and user-mode issues across multiple Windows versions.
• Collaborate with researchers and product teams to translate threat intelligence into product features.
• Conduct code reviews, mentor engineers, and contribute to architectural decisions.
• Stay current with Windows internals, security trends, and system programming best practices.

Our requirements

• Recent, hands-on experience developing Windows kernel drivers (for at least the last 2 years) using KMDF, Windows Filtering Platform (WFP), minifilters, and ETW.
• 7+ years of hands-on experience in C++ development (C++11 or later).
• In-depth understanding of Windows internals, including kernel architecture, system calls, memory management, and drivers.
• Strong debugging and reverse engineering skills using tools such as WinDbg, Process Monitor, Process Explorer, IDA, or Ghidra.
• Familiarity with Windows security mechanisms, including integrity levels, UAC, AppLocker, and Secure Boot.
• Experience using Visual Studio, Windows Driver Kit (WDK), and related development environments.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Optional

• Experience developing with Rust.
• Experience building or contributing to endpoint security products (EDR, AV, EPP, etc.).
• Familiarity with Windows telemetry, Event Logs, Sysmon, and ETW tracing.
• Experience with malware analysis, Windows exploitation techniques, or SOC/DFIR workflows.
• Experience in the cybersecurity domain is a plus.
• Scripting skills in PowerShell or Python for automation and testing.
• Understanding of kernel-mode security evasion techniques and defensive mechanisms.
• Experience with code signing, driver deployment, and secure update mechanisms.

What we offer

• Vacation days: Up to 26 business days per year.
• 10 illness/special days off per year (fully paid, no medical papers needed) for all contract types.
• Health and life insurance (Luxmed).
• MyBenefit platform with Multisport option.
• Internal psychological support service.
• English language classes from the first working day.
• Access to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training.
• Flexible workplace: work from the office, from home, or choose a hybrid option.
• Tech Skills Mentoring Program.
• Opportunities to develop as a public speaker, mentor, or technical interviewer.
• Fully paid idle (bench) when not involved in a project.
• Certification reimbursement (AWS, GCP, Microsoft, etc.).

This is how we work on a project

Development opportunities we offer

Benefits